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Please amend the claims as follows: 

1. (currently amended) A method to mcrease the safety integrity level of a Controll e r 
(tO) controller for control of real world objects, charact e riz e d by, the method comprising: 

attaching to the s«d single (1 chann e l) Controll e r (10) controller a safety-hardware unit 
(44) wherein the safety hardware unit (W) communicates with the said Controller's CPU a 
central processinig unit of the controller , 

downloading safety-related configuration data and/or diagnostic information to the 
attached safety-hardware unit (44) and downloading the control function software to the 
Controll e r (10) controller, 

configuring the attached safety-hardware unit fJ4) to execute logic, which depends on the 
downloaded safety-related configuration data and/or diagnostic information, and in an active or 
passive way set th e Controll e r's (10) output values of the controller to a safe state for online 
safety control. 

2. (currently amended) A The method according to claim 1, charact e rized in that 
wherein the Controller (10) hav e controller has the capability of executing a set of non-safety 
critical control functions, which set of non-safety critical control functions is the same before as 
well as after the safety hardware unit (H) is attached. 

3. (currently amended) A The method according to claim 2, characterized in that 
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wherein the configuring st e p compris e th e additional steps or comprises: 

downloading to the attached safety hardware unit (44) diagnostic information, which 
previously was automatically generated by a software tool as a result of user's configuration of 
the Controll e r (10) controller and which diagnostic information is used in the attached safety 
hardware unit (14) during safety critical control. 

4. (currently amended) A The method according to any previous claim, characteriz e d in 
that claim L wherein access to a plurality of input and output values of a real world object is 
obtained through a bus (t^ connected between the Controller (10) controller and to an 
input/output unit (t§) and the vaUdity of the bus (44) communication is verified in the attached 
safety hardware unit (14). 

5. (currently amended) A The method according to any pr e vious claim, charact e riz e d in 
feat claim L wherein the timing supervision of the Controll e r (10) controller is verified in the 
attached safety hardware unit (14). 

6. (currently amended) A The method according to any previous claim, charact e riz e d in 
feat claim L wherein correct sequence of code logic is verified in the attached safety hardware 
unit (14). 

7. (currently amended) A The method according to any previous claim, charact e riz e d in 
that claim K wherein correctness of memory content of the controller (10) is verified in the 
attached safety hardware unit (14). 
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8. (currently amended) A The method according to any pr e vious charact e riz e d in that 
claim L wherein a download of new control functionality logic to the Controll e r controller is 
verified in the attached safety hardware unit (H). 

9. (currently amended) A The method according to any pr e vious claim, charact e rized in 
fliat claim K wherein the attached safety hardware unit (H) performs checks in order to allow 
only users logged on as safety classified engineers and safety classified operators to modify the 
control functionality logic and parameters. 

10. (currently amended) A The method according to claim 4, characteriz e d in that 
wherein the bus (44) communication verification logic in the attached safety hardware unit (44) 
is implemented diverse. 

11. (currently amended) A The method according to claim 4, characterized in that 
wherein the attached safety hardware unit 44 is diverse generating a safety related header for the 
bus (M) communication. 

12. (currently amended) A The method according to claim 1 1, charact e riz e d in that 
wherein the Input/Output input/output imit (15) has two diverse implementations each verifying 
the correctness of the bus (i4) traffic and each generating a safety related header for the bus 
communication. 
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13. (currently amended) A The method according to any pr e vious claim, characteriz e d 
in that claim K wherein the attached safety hardware unit compris e comprises a first and a 
second module in a redundant configuration, the second module is updated with data that exists 
first module at the time of a failure and the second module takes over the safety related control of 
the control system firom the first module if a failure of the first module is detected. 

14. (currently amended) A ITie method according to claim 13, characteriz e d in that 
wherein the a redundant Controller controller unit is attached to the Controll e r (10) controller, 
which takes over in case of a failure of a primary Controll e r controller and the redundant 
Controll e r controller unit establish communication with either the active first module or the 
active second module of the attached safety hardware unit. 

15. (currently amended) A single or 1 -channel Control Syst e m (20) control svstem 
intended for safety-related control of real-world objects, comprising: charact e riz e d in that, 

a single main €P¥ central processing unit handling the main processes of a Controller 
ftO^ controller, 

an attached safety-hardware unit (14) comprising means to increase the safety-integrity 
level of the Controll e r controller and comprising means to set th e Controll e r's output values of 
the controller in a safe state for online safety control. 

16. (currently amended) A Control System The control svstem according to claim 15, 
charact e rized in that wherein the Controller (10) have controller has the capability of executing a 
set of non-safety critical control fimctions, which set of non-safety critical control fiinctions is 
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the same before as well as after the safety hardware unit is attached. 



17. (currently amended) A Control Syst e m The control system according to claim 16, 
characterized in that it compris e s, further comprising: 

means for downloading to the attached safety hardware unit diagnostic information, 
which previously was automatically generated by a software tool as a result of user's 
configuration of the Controll e r controller and which diagnostic information is used in the 
attached safety hardware unit during safety critical control. 

18. (currently amended) A Control Syst e m The control system according to claim 17, 
characterized in that it compris e s further comprising: 

an input/output unit (15) connected to the Controll e r (10) controller by a bus and the 
validity of the bus (i4) communication is verified in the attached safety hardware unit. 

19. (currently amended) A Control Syst e m The control system according to claim 18, 
charact e riz e d in that wherein the bus (M) communication verification logic in the attached safety 
hardware unit (i4) is implemented diverse. 

20. (currently amended) A Control System The control system according to claim 19, 
characteriz e d in that wherein the attached safety hardware unit ()4) is diverse generating a safety 
related header for the bus (44) communication. 
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